This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/d4U5X5FQoFFMeYiPTra-mEEtoDs.roa File: d4U5X5FQoFFMeYiPTra-mEEtoDs.roa (raw, json) Hash identifier: Bc71rFnX5tssTQWod1hPvASHSwhfXVdHJq9tgtv9el0= Subject key identifier: 77:85:39:5F:91:50:A0:51:4C:79:88:8F:4E:B6:BE:98:41:2D:A0:3B Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019B7F8573FEE93C489CC460825B96A239DA Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/d4U5X5FQoFFMeYiPTra-mEEtoDs.roa Signing time: Fri 02 Jan 2026 16:23:30 +0000 ROA not before: Fri 02 Jan 2026 16:23:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215346 IP address blocks: 193.124.15.0/24 maxlen: 24 194.58.37.0/24 maxlen: 24 194.135.33.0/24 maxlen: 24 195.133.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:73:fe:e9:3c:48:9c:c4:60:82:5b:96:a2:39:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Jan 2 16:23:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7785395f9150a0514c79888f4eb6be98412da03b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:21:fe:34:a1:5a:22:63:f4:d0:44:80:51:7f: 62:13:3a:95:db:a3:fc:29:d6:83:f7:ec:0b:8f:6c: 95:84:fb:93:97:96:03:d9:27:a4:f2:3b:60:49:67: 5d:99:54:cb:1b:9e:b5:56:20:63:7d:c8:a2:0a:fb: 45:de:0e:98:2c:7d:de:b5:9a:53:28:38:e2:b7:6d: b6:6b:e4:2e:ee:ad:cc:e5:75:a4:37:41:a6:17:b2: 3b:82:cb:c4:21:2a:c7:93:f0:3a:d3:ed:cd:3a:ac: e2:6c:f3:f6:97:1f:5c:7e:e3:f8:97:dc:7a:8a:f3: f4:37:78:e6:15:97:1b:2c:91:2b:05:89:8b:2f:fe: 22:06:4d:8f:ac:dd:7b:b5:dc:8e:f3:b8:b0:f1:44: 49:9c:8f:61:31:75:e9:8b:d8:1d:53:48:f8:04:37: 8c:3b:5c:5b:b4:e1:09:ad:29:5e:b6:6c:17:c6:ce: c5:66:28:b2:a9:76:eb:6b:06:da:5e:f7:56:bf:d7: 65:92:e1:99:53:4d:9f:31:5b:e1:8e:53:5a:9a:39: a1:74:10:18:c3:2d:e5:03:c5:9e:40:5e:36:f8:e7: 1d:e5:17:f7:cb:8e:69:c7:37:33:87:aa:dd:5a:7c: e6:be:98:2d:c8:38:94:9d:b3:30:9b:52:3b:56:c7: 2f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:85:39:5F:91:50:A0:51:4C:79:88:8F:4E:B6:BE:98:41:2D:A0:3B X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/d4U5X5FQoFFMeYiPTra-mEEtoDs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.124.15.0/24 194.58.37.0/24 194.135.33.0/24 195.133.94.0/24 Signature Algorithm: sha256WithRSAEncryption 43:90:a8:2c:a9:5b:bf:fe:38:46:5b:be:64:44:33:84:c5:7f: e3:cc:d3:ca:5f:c4:99:a6:9a:6f:ff:a0:5b:af:9e:34:05:54: 0e:c9:7a:9a:b1:80:c2:04:ac:c3:ee:f9:f6:1c:f4:44:70:80: b2:e1:63:73:87:4d:e5:a5:7b:1d:20:31:c0:82:37:2a:0f:13: 2b:f5:e9:0c:eb:a7:03:b5:19:5a:93:f3:e0:d9:69:af:65:86: 89:90:3e:c5:29:50:0f:32:84:7a:66:0e:3d:a1:e9:2a:f2:13: 48:47:55:ce:c9:c1:9d:e2:bc:ab:48:8f:1b:45:f2:2c:56:e6: ca:99:45:5f:65:a6:7c:e1:de:01:b4:5d:76:2e:1e:23:9c:a1: 8b:a9:7e:89:0a:ac:e2:be:49:24:2b:6f:3a:fa:8d:87:14:88: ca:b3:d3:9c:a8:6f:8e:60:5d:21:db:d3:3b:2f:d8:03:d3:07: 72:51:6e:2d:5e:ac:54:69:2a:89:f5:64:c6:c2:ce:d8:be:83: 54:2b:62:6f:b8:a6:73:6b:33:ac:46:60:c2:63:dc:9a:d8:98: 05:3f:f9:d0:60:c8:f0:26:05:97:03:16:d9:f6:b4:48:1d:dd: b9:5d:65:f3:ce:74:e0:95:63:83:0a:00:01:93:03:58:a0:52: 49:b3:2c:d2 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/hXP+6TxInMRggluWojnaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjYwMTAyMTYyMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Nzg1Mzk1ZjkxNTBhMDUxNGM3OTg4OGY0ZWI2YmU5ODQxMmRhMDNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyH+NKFaImP00ESAUX9iEzqV26P8 KdaD9+wLj2yVhPuTl5YD2Sek8jtgSWddmVTLG561ViBjfciiCvtF3g6YLH3etZpT KDjit222a+Qu7q3M5XWkN0GmF7I7gsvEISrHk/A60+3NOqzibPP2lx9cfuP4l9x6 ivP0N3jmFZcbLJErBYmLL/4iBk2PrN17tdyO87iw8URJnI9hMXXpi9gdU0j4BDeM O1xbtOEJrSletmwXxs7FZiiyqXbrawbaXvdWv9dlkuGZU02fMVvhjlNamjmhdBAY wy3lA8WeQF42+Ocd5Rf3y45pxzczh6rdWnzmvpgtyDiUnbMwm1I7VscvcQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFHeFOV+RUKBRTHmIj062vphBLaA7MB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvZDRVNVg1RlFvRkZNZVlpUFRyYS1tRUV0b0RzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwXwPAwQA wjolAwQAwochAwQAw4VeMA0GCSqGSIb3DQEBCwUAA4IBAQBDkKgsqVu//jhGW75k RDOExX/jzNPKX8SZpppv/6Bbr540BVQOyXqasYDCBKzD7vn2HPREcICy4WNzh03l pXsdIDHAgjcqDxMr9ekM66cDtRlak/Pg2WmvZYaJkD7FKVAPMoR6Zg49oekq8hNI R1XOycGd4ryrSI8bRfIsVubKmUVfZaZ84d4BtF12Lh4jnKGLqX6JCqzivkkkK286 +o2HFIjKs9OcqG+OYF0h29M7L9gD0wdyUW4tXqxUaSqJ9WTGws7YvoNUK2JvuKZz azOsRmDCY9ya2JgFP/nQYMjwJgWXAxbZ9rRIHd25XWXzznTglWODCgABkwNYoFJJ syzS -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:48 2026 by rpki-client